the_dude

used to run rds gateway but figured it was open to exploit. VPN now

Right! I guess I'm probably just a control freak.

Intune is great, but it lacks the granular control that you have with GPO. It has some control, but not on the level of GPO. PolicyPak seems to fill that void, looking to see if there are other options out there. Thanks.

I'm looking for an alternative to GPO that can be deployed in the cloud. PolicyPak is one product that we are looking at. What other options are out there? Intune seems to be lacking in that regard. Thanks.

Looking at standing up some VM's, syncing AD. What cloud architecture do you recommend? Cost is the biggest factor(we are K12). Thanks in advance.

Airwatch is good too, JAMF is about £3 per device and we like the focus app for teachers to be able to reset passwords etc: Classroom Management Software | Casper Focus | JAMF Software

We are in the market for an iOS mdm at the moment. Currently using Meraki free but we need to start using ios9 features like pushing apps to devices (btw meraki quoted us $240,000/year WTF? I guess they don't want our business). With the amount of devices that we have (7,000) we need a way to tag or group the devices based on who they are checked out to. Example: iPad get checked out to Johnny Smith in Mrs. Jones Class. iPad gets tagged with "iPad - Johnny Smith, Mrs. Jones, 3rd Grade, Washington Elementary School". Apps can be pushed to any of those tags. INTUNE has no way of doing this. That's a deal breaker for us. EVERY mdm out there has a way of doing this. I've expressed our frustrations to our MS rep. I also have serious concerns with how quickly they adopt new technology. I think they only recently started supporting VPP which has been out for numerous years. So far JAMF and MobileIron are looking much much better.....good luck.

"1. Reduction in the time in between synchronizations of your on premises Active Directory and the cloud. Prior to today the lowest you could go is 3 hours, with the new iteration today you can reduce this down to a 30 minute interval. Technically you could set it to whatever you want now, but it will not honor less than 30 minutes." That's lame. I sync every 3 minutes right now.

Is this the same as the E3 Azure Rights Management? Has anyone set this up? I would appreciate a few simple instructions so I don't have to try to read technet....

I just noticed that in my portal this morning, haven't done it yet but I probably will. MS no longer forcing their crappy social network on us.

It won't auto login, but if you connect an SSO to GAFE you could use the same password. Not single-on though...

use the exchange server deployment assistant: https://technet.microsoft.com/en-us/office/dn756393.aspx

admin console >> apps >> gmail >> advanced settings >> content compliance >> edit >> fairly straightforward here I think.

you need to link meraki with apple's DEP

@spr that is my understanding. @AndrewTechGuy, we do the same thing but this requires an itunes account registered with vpp. We maintain 4,000 of those right now, like to get away from that.

WWDC: What's New in Managing Apple Devices? Quite a lot! | Enterprise iOS does anyone have any more info on this?

this is actually related to dep settings, see the first post.

when your certificate expires and you have to reconnect to DEP it deletes all the profiles. That's all I've found. No real way to delete a profile after you create one.

How do I turn this off? I see the gam agreetoterms on|off command, but it does not seem to work when I run it. Thanks.

I got this from another board, haven't had a chance to verify yet. FYI: New Customers - Up to 100 devices will be free for enterprise. Only thing you do not get is phone support. Over 100 devices and you pay per device (iOS, Android, Win, Mac) that you have added to your system manager. There will no longer be a free version available for new customers with over 100 devices starting March 24. Those using it before March 24 when the new system goes into place - Will get to continue to use the free features for free “forever” for as many devices as they want Like now, will get no phone support Can upgrade to the paid version for a discounted price between now and June for 1, 3, or 5 year licenses (They did not say how much the discount was – they said contact Meraki sales rep) – The discount is only applied to devices in your dashboard at the time you upgrade. Once upgraded to paid, cannot go back to free (other than the 100 or under device model) All devices in the dashboard must have a license. For example if you have 200 iPads and 100 Macs, and you only want the iPads on the paid version, you can’t do that. All 300 have to have licenses. The retail cost of the licenses is $40 per device per year, with a free year for 3 and another free year for 5. $40 for 1 year $80 for 3 years $120 for 5 years They recommend adding 20% buffer for growth, especially if buying a multi-year license. So for 500 devices with a 20% buffer = 600 devices – Cost – 1 year – $24,000 3 year – $48,000 5 year – $72,000

We've been with Office 365 for about 2 years, students and staff around 25,000 accounts. Recently we stood up a GAFE domain for chromebooks, classrooms...etc. Here is what I would like help with, at the moment the office365 email domain is the one that is open for email from the outside and the GAFE domain users have to forward the message to their Office 365 email account for the message to get to the outside world. I'm concerned about having two externally facing email domains and the confusion that it would entail. If you have both systems, what are you doing? Thanks.

Meraki >> MDM >> DEP >> select checkbox next to iPad >> Assign Settings >> there is a create settings, but how do I delete settings?

So looks like Office 365 groups are a new feature. I've got a bunch of children creating these....is there a way to block this? Thanks.

I'm a GAFE n00b, what are my options for syncing existing AD passwords? I've seen something called VIWO that is supposed to do it? Is anyone using this or using another method to sync existing passwords? from gaps config guide: GAPS doesn't sync your existing Active Directory passwords to Google Apps; it only syncs password changes. Be sure to instruct your users to change their Active Directory passwords (as described in step 5) to sync passwords to Google Apps.

I get this all the time too, but it works....whatever. Set-MsolUserLicense : Unable to assign this license because it is invalid.